last executing test programs: 3m34.779213721s ago: executing program 1 (id=257): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00002c0001800600134000000000140001800800"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m33.824151174s ago: executing program 1 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 3m32.805851438s ago: executing program 1 (id=265): socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.73860712s ago: executing program 1 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001002dbd70000000000081808000000068000000000008000f"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) r3 = open(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x240000, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r4 = dup(r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$ptp(r4, &(0x7f00000001c0)=""/207, 0xcf) 3m32.604846983s ago: executing program 1 (id=268): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") unshare(0x480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a3000000000580003805400038014000100"], 0x124}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = dup(r3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x44048090) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x10100000000000a, &(0x7f0000000740)={0xffffffffffffffff}, 0x13f, 0x3}}, 0xffffffffffffff20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x7fff, 0x0, {"0000000000000000000000001200"}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @loopback, 0x9c}, {0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, r5, 0x8}}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) ioctl$SG_GET_PACK_ID(r7, 0x227c, 0x0) preadv(r6, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/43, 0x2b}], 0x1, 0x36, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000200)={'ip_vti0\x00', r8, 0x8000, 0x40, 0x90, 0xe95, {{0x8, 0x4, 0x0, 0x8, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @loopback, {[@noop, @end, @generic={0x7, 0xa, "79de780b9c46a9a6"}]}}}}}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m31.582541917s ago: executing program 1 (id=272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x40000, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (fail_nth: 1) 3m31.582055097s ago: executing program 32 (id=272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x40000, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (fail_nth: 1) 5.353651623s ago: executing program 0 (id=1720): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8400132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.298336279s ago: executing program 0 (id=1735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000406010300000000000000000300000205000100070000005b9b8337bbce6545"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bind(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote, 'xfrm0\x00'}}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 3.867786579s ago: executing program 3 (id=1729): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd702202dcff2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004098}, 0x40000) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 3.39443276s ago: executing program 0 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0xb, 0x42f, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x109000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) mount$nfs4(0x0, &(0x7f0000000500)='.\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}]}}}]}, 0x50}}, 0x0) linkat(r3, 0x0, r5, 0x0, 0x1400) mmap$xdp(0x0, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x80000000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) lseek(r2, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r9, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0xb8}}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 2.95469665s ago: executing program 3 (id=1734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000406010300000000000000000300000205000100070000005b9b8337bbce6545"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bind(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote, 'xfrm0\x00'}}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 2.745755415s ago: executing program 2 (id=1738): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.366588454s ago: executing program 0 (id=1741): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa3d86dd6000195800103abffe800000000000000000000000000012"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x6, @time={0x7fffffff, 0xd6a}, 0x5, {}, 0x0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r4, &(0x7f0000000500)='\x00', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2858, 0x4) 1.942244704s ago: executing program 4 (id=1743): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000406010300000000000000000300000205000100070000005b9b8337bbce6545"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bind(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote, 'xfrm0\x00'}}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 1.877597176s ago: executing program 3 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd702202dcff2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004098}, 0x40000) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 1.755770468s ago: executing program 2 (id=1745): ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x1, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x2, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a1, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000040)={0x100a, 0x8, 0x29b}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.554528873s ago: executing program 2 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 1.432056106s ago: executing program 0 (id=1748): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdffffffffffffffd, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x40000) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 937.506548ms ago: executing program 3 (id=1749): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x3, 0x8000) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB="2c3051f8441da8"]) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xffefffffff7efffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005f00)={{{@in6=@private2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000006000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x20000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 936.247068ms ago: executing program 5 (id=1759): r0 = io_uring_setup(0x1dbc, &(0x7f0000000400)={0x0, 0x196c, 0x4000, 0x1, 0x178}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/223, 0xdf}], &(0x7f00000005c0)=[0xffffffff, 0x3], 0x1}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) readv(r1, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0xa000000) mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff01000000000000", @ANYRES32, @ANYBLOB="06000000000045a3000000cab167cb695da2ff3cd6cb4d1b09c0d62e531a7d724943b5719254c9fb41c070580c864eb899d8412f89e31009a8c0db31be96", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000000000000100"/28], 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0xb}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}]}}]}, 0x58}}, 0x40008b6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="13800b1000001500f5ffff06", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="03000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000006a010200839b8eb95d0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000005ef1fba18693d3b2956c5853d7f8bd0d2d81c9a82f3177c1174f2f3c96be73b813f468d53bb1125b3ff12e3cc852221f3292f22154f03f2f786b2968c668cb61103927151a0983bb59e846975b3b92e519ea"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r9, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004090) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80000000, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 721.932013ms ago: executing program 4 (id=1750): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="14", 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff0921"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xd0, 0x150, 0x150, 0xd0, 0xf8010000, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'team0\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 647.764095ms ago: executing program 2 (id=1751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d0000000000000000170000000800", @ANYRES32=r2, @ANYBLOB="6000308005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 634.604115ms ago: executing program 5 (id=1752): r0 = io_uring_setup(0x1dbc, &(0x7f0000000400)={0x0, 0x196c, 0x4000, 0x1, 0x178}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/223, 0xdf}], &(0x7f00000005c0)=[0xffffffff, 0x3], 0x1}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) readv(r1, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0xa000000) mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff01000000000000", @ANYRES32, @ANYBLOB="06000000000045a3000000cab167cb695da2ff3cd6cb4d1b09c0d62e531a7d724943b5719254c9fb41c070580c864eb899d8412f89e31009a8c0db31be96", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000000000000100"/28], 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0xb}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}]}}]}, 0x58}}, 0x40008b6) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="13800b1000001500f5ffff06", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="03000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r8, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004090) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80000000, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 569.541507ms ago: executing program 4 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f0000000080)={[{@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@acl}]}, 0x1, 0x551, &(0x7f0000000940)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd702202dcff2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004098}, 0x40000) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 568.706837ms ago: executing program 2 (id=1754): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2bf, 0x0, &(0x7f0000000940)="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", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = eventfd2(0x2, 0x80801) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="6effef930c53dea1", 0x8}, {&(0x7f0000000280)='~', 0x1}], 0x2) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000a80)={&(0x7f00000001c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x138, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {0x2}, [@generic="82d8a887d0e6b74226ecb294b4ec0d7ae6218dcdd0672ab45f1d12e54dc175ecab470c71b0e38d2be0c5351204de5b9c04d06fa25694c4fa2e84c4e2012b36674c3c62b57751a9cec11c01f864ee23039978f8728b4545991bc0271273405390ef770a51d3f938357bce5fce767da3d82e92f604", @generic="9d555fa698de2b6d16b09e70240e5409f4347a8f5c523d0e9b98e593", @typed={0x8, 0x109, 0x0, 0x0, @uid=r5}, @typed={0x89, 0xe7, 0x0, 0x0, @binary="27233e7fb4e73cc46d4cfd5415ee136c247f8f4ec4d8f4020731121d33c8d81ec580b764f82e93d9a09175812dc7bc5ec041e7de805ff3c7df5957c050301cf23417c5c18954ba865c134c13e3bb0fa666efd3560143fa283547c02b475a1576f994ba472d9e006db0241d3164c751d580235e4d0e8754f8f09d693053ddaafc2ad47d3a7d"}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000}, 0x20000090) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) kcmp(r7, r7, 0xf94b033e2108b94d, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 415.818991ms ago: executing program 0 (id=1755): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 288.672593ms ago: executing program 4 (id=1756): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) recvmsg$unix(r0, 0x0, 0x40000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) syz_emit_ethernet(0x94, &(0x7f00000025c0)={@random="0500fe3d91b5", @random="0010060800", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x5e, 0x2f, 0x0, @dev, @local, {[@routing={0x3a, 0x2, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x7]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x8001}}}}}}}}}, 0x0) 263.960544ms ago: executing program 3 (id=1757): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2, 0x4000000}], 0x37) 241.098724ms ago: executing program 5 (id=1758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8dffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 166.558526ms ago: executing program 3 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd702202dcff2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004098}, 0x40000) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 164.758186ms ago: executing program 2 (id=1761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000406010300000000000000000300000205000100070000005b9b8337bbce6545"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bind(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote, 'xfrm0\x00'}}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 164.528396ms ago: executing program 4 (id=1762): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000000301040000000000000000020000"], 0x40}}, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x80000, 0x43) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 93.460888ms ago: executing program 4 (id=1763): r0 = io_uring_setup(0x1dbc, &(0x7f0000000400)={0x0, 0x196c, 0x4000, 0x1, 0x178}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/223, 0xdf}], &(0x7f00000005c0)=[0xffffffff, 0x3], 0x1}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) readv(r1, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0xa000000) mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff01000000000000", @ANYRES32, @ANYBLOB="06000000000045a3000000cab167cb695da2ff3cd6cb4d1b09c0d62e531a7d724943b5719254c9fb41c070580c864eb899d8412f89e31009a8c0db31be96", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000000000000100"/28], 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0xb}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}]}}]}, 0x58}}, 0x40008b6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="13800b1000001500f5ffff06", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="03000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000006a010200839b8eb95d0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000005ef1fba18693d3b2956c5853d7f8bd0d2d81c9a82f3177c1174f2f3c96be73b813f468d53bb1125b3ff12e3cc852221f3292f22154f03f2f786b2968c668cb61103927151a0983bb59e846975b3b92e519ea"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r9, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004090) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80000000, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 65.417049ms ago: executing program 5 (id=1764): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="14", 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff0921"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 663.87µs ago: executing program 5 (id=1765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d000000000000000017000000080003", @ANYRES32=r2, @ANYBLOB="6000308005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 0s ago: executing program 5 (id=1766): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604080003040000000000000002000300080000000903000038000000ce0000400e0000000b00200016"], 0x58) lseek(0xffffffffffffffff, 0x9, 0x3) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) stat(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delroute={0x30, 0x19, 0x1, 0xfffffffc, 0x25dfdc01, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x4, 0x0, 0xb, 0x2300}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x28, 0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) readv(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@nodelalloc}, {@dioread_nolock}, {@data_err_ignore}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@dioread_lock}]}, 0x1, 0x490, &(0x7f0000000c00)="$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") r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): _burst socket option. [ 178.526075][ T7044] Use struct sctp_assoc_value instead [ 178.601900][ T7037] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.625426][ T7037] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.805914][ T29] audit: type=1326 audit(1787199622.744:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.0.764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2c24e90e code=0x7ffc0000 [ 178.805994][ T29] audit: type=1326 audit(1787199622.744:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.0.764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2c24e90e code=0x7ffc0000 [ 178.806130][ T29] audit: type=1326 audit(1787199622.844:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.0.764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdb2c24e90e code=0x7ffc0000 [ 178.844637][ T7037] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 179.251356][ T7037] syz.3.777 (7037) used greatest stack depth: 9744 bytes left [ 180.466249][ T7082] FAULT_INJECTION: forcing a failure. [ 180.466249][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 180.498420][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.498504][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.498527][ T7082] Call Trace: [ 180.498537][ T7082] [ 180.498547][ T7082] __dump_stack+0x1d/0x30 [ 180.498591][ T7082] dump_stack_lvl+0x95/0xd0 [ 180.498614][ T7082] dump_stack+0x15/0x1b [ 180.498655][ T7082] should_fail_ex+0x262/0x280 [ 180.498697][ T7082] should_failslab+0x8c/0xb0 [ 180.498773][ T7082] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 180.498803][ T7082] ? __alloc_skb+0x2e0/0x6f0 [ 180.498863][ T7082] ? __alloc_skb+0x2e0/0x6f0 [ 180.498903][ T7082] ? kmem_cache_alloc_noprof+0x19b/0x3c0 [ 180.498934][ T7082] __alloc_skb+0x2e0/0x6f0 [ 180.498974][ T7082] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 180.499004][ T7082] ? __alloc_skb+0x209/0x6f0 [ 180.499042][ T7082] alloc_skb_with_frags+0x7e/0x3d0 [ 180.499089][ T7082] ? __d_rehash+0x124/0x1d0 [ 180.499246][ T7082] sock_alloc_send_pskb+0x44d/0x500 [ 180.499276][ T7082] ? avc_has_perm+0x101/0x190 [ 180.499320][ T7082] ? __rcu_read_unlock+0x4e/0x70 [ 180.499419][ T7082] packet_sendmsg+0x21d0/0x31b0 [ 180.499450][ T7082] ? __pfx_selinux_set_mnt_opts+0x10/0x10 [ 180.499534][ T7082] ? selinux_socket_sendmsg+0x394/0x410 [ 180.499574][ T7082] ? __pfx_packet_sendmsg+0x10/0x10 [ 180.499757][ T7082] __sys_sendto+0x411/0x470 [ 180.499806][ T7082] __x64_sys_sendto+0x76/0x90 [ 180.499861][ T7082] x64_sys_call+0x200c/0x2550 [ 180.499912][ T7082] do_syscall_64+0x112/0x360 [ 180.499943][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.499968][ T7082] RIP: 0033:0x7fdb2c28e0d9 [ 180.500052][ T7082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.500072][ T7082] RSP: 002b:00007fdb2ace7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 180.500094][ T7082] RAX: ffffffffffffffda RBX: 00007fdb2c515fa0 RCX: 00007fdb2c28e0d9 [ 180.500147][ T7082] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000004 [ 180.500165][ T7082] RBP: 00007fdb2ace7090 R08: 0000200000000080 R09: 0000000000000014 [ 180.500182][ T7082] R10: 0000000020008884 R11: 0000000000000246 R12: 0000000000000001 [ 180.500196][ T7082] R13: 00007fdb2c516038 R14: 00007fdb2c515fa0 R15: 00007fff8fc7b158 [ 180.500224][ T7082] [ 180.838231][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 181.284751][ T7110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'. [ 181.797510][ T7115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 181.797859][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.5.799'. [ 181.807649][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.808128][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 181.842582][ T7115] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 181.852596][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.862659][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 181.873005][ T7115] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 181.880826][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.889821][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 181.897954][ T7115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.126827][ T35] usb 7-1: new high-speed USB device number 3 using vhci_hcd [ 182.146041][ T7126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 182.153777][ T7126] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.162576][ T7126] vhci_hcd vhci_hcd.0: Device attached [ 182.408378][ T850] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 182.476837][ T850] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 182.762147][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 182.762166][ T29] audit: type=1400 audit(1787199628.244:2700): avc: denied { wake_alarm } for pid=7133 comm="syz.4.805" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.824836][ T7127] vhci_hcd: connection reset by peer [ 182.856786][ T3949] vhci_hcd vhci_hcd.2: stop threads [ 182.882405][ T3949] vhci_hcd vhci_hcd.2: release socket [ 182.931175][ T29] audit: type=1400 audit(1787199628.354:2701): avc: denied { name_bind } for pid=7134 comm="syz.0.803" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 182.960747][ T3949] vhci_hcd vhci_hcd.2: disconnect device [ 182.985720][ T7120] vhci_hcd: connection closed [ 182.985921][ T7118] vhci_hcd: connection closed [ 182.991962][ T3949] vhci_hcd vhci_hcd.3: stop threads [ 182.993705][ T7116] vhci_hcd: connection reset by peer [ 182.997386][ T3949] vhci_hcd vhci_hcd.3: release socket [ 182.997434][ T3949] vhci_hcd vhci_hcd.3: disconnect device [ 183.034796][ T3949] vhci_hcd vhci_hcd.3: stop threads [ 183.048634][ T3949] vhci_hcd vhci_hcd.3: release socket [ 183.067360][ T3949] vhci_hcd vhci_hcd.3: disconnect device [ 183.078526][ T3949] vhci_hcd vhci_hcd.3: stop threads [ 183.088615][ T3949] vhci_hcd vhci_hcd.3: release socket [ 183.097665][ T3949] vhci_hcd vhci_hcd.3: disconnect device [ 183.338933][ T29] audit: type=1400 audit(1787199628.824:2702): avc: denied { create } for pid=7145 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.477769][ T29] audit: type=1400 audit(1787199628.914:2703): avc: denied { write } for pid=7145 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.548884][ T29] audit: type=1400 audit(1787199629.034:2704): avc: denied { getopt } for pid=7154 comm="syz.0.813" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.596258][ T29] audit: type=1400 audit(1787199629.034:2705): avc: denied { write } for pid=7154 comm="syz.0.813" name="target" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.686038][ T29] audit: type=1400 audit(1787199629.034:2706): avc: denied { add_name } for pid=7154 comm="syz.0.813" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.693587][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 183.745629][ T29] audit: type=1400 audit(1787199629.034:2707): avc: denied { create } for pid=7154 comm="syz.0.813" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 183.821428][ T29] audit: type=1400 audit(1787199629.164:2708): avc: denied { connect } for pid=7152 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.041961][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 184.156544][ T7178] netlink: 144 bytes leftover after parsing attributes in process `syz.0.814'. [ 184.461423][ T7184] syzkaller0: entered promiscuous mode [ 184.482290][ T7184] syzkaller0: entered allmulticast mode [ 184.677307][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.823'. [ 184.994252][ T7189] syz.2.824 (7189): drop_caches: 0 [ 185.623764][ T29] audit: type=1400 audit(1787199631.104:2709): avc: denied { write } for pid=7194 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.675233][ T7199] 9p: Bad value for 'source' [ 186.346304][ T7209] Set syz0 is full, maxelem 65536 reached [ 187.603323][ T850] usb 5-1: enqueue for inactive port 0 [ 187.611510][ T850] usb 5-1: enqueue for inactive port 0 [ 188.601682][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.611113][ T850] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 188.914734][ T7252] SELinux: syz.3.845 (7252) wrote to checkreqprot. This is no longer supported. [ 190.554012][ T7308] netlink: 'syz.5.848': attribute type 1 has an invalid length. [ 190.557548][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 190.557613][ T29] audit: type=1400 audit(1787199636.034:2711): avc: denied { mounton } for pid=7299 comm="syz.5.848" path="/proc/292/task" dev="proc" ino=15415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 190.563090][ T7308] netlink: 'syz.5.848': attribute type 1 has an invalid length. [ 190.771100][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 190.871278][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 191.144536][ T7333] random: crng reseeded on system resumption [ 191.217695][ T29] audit: type=1400 audit(1787199636.624:2712): avc: denied { write } for pid=7311 comm="syz.0.849" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 191.282201][ T29] audit: type=1400 audit(1787199636.624:2713): avc: denied { open } for pid=7311 comm="syz.0.849" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.014069][ T7332] syz.2.854 (7332) used greatest stack depth: 9528 bytes left [ 192.200129][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'. [ 192.837205][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.859'. [ 193.617737][ T7384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.869'. [ 194.201639][ T7342] Set syz0 is full, maxelem 65536 reached [ 194.310633][ T29] audit: type=1400 audit(1787199639.794:2714): avc: denied { bind } for pid=7370 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.381589][ T29] audit: type=1400 audit(1787199639.794:2715): avc: denied { node_bind } for pid=7370 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 194.410127][ T29] audit: type=1400 audit(1787199639.854:2716): avc: denied { setopt } for pid=7370 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.459398][ T7392] netlink: 'syz.2.873': attribute type 8 has an invalid length. [ 194.486779][ T7392] sch_fq: defrate 0 ignored. [ 194.818692][ T7412] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 194.858160][ T7414] Driver unsupported XDP return value 0 on prog (id 166) dev N/A, expect packet loss! [ 194.937041][ T29] audit: type=1400 audit(1787199640.424:2717): avc: denied { mount } for pid=7393 comm="syz.3.872" name="/" dev="gadgetfs" ino=4807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 195.803455][ T29] audit: type=1400 audit(1787199641.274:2718): avc: denied { watch } for pid=7431 comm="syz.4.883" path="/187" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.867679][ T7432] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 195.886436][ T7438] 9p: Bad value for 'source' [ 195.970392][ T7441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.884'. [ 196.138438][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 196.772583][ T7456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.890'. [ 197.217330][ T7436] Set syz0 is full, maxelem 65536 reached [ 197.576070][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 197.884041][ T7470] Set syz1 is full, maxelem 6117 reached [ 198.015694][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.898'. [ 199.251782][ T29] audit: type=1400 audit(1787199644.734:2719): avc: denied { write } for pid=7510 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.337190][ T29] audit: type=1400 audit(1787199644.824:2720): avc: denied { bind } for pid=7508 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.430324][ T7496] Set syz0 is full, maxelem 65536 reached [ 199.450515][ T29] audit: type=1400 audit(1787199644.854:2721): avc: denied { setopt } for pid=7508 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.522557][ T7516] bond0: peer notification delay (14) is not a multiple of miimon (100), value rounded to 0 ms [ 199.588695][ T29] audit: type=1400 audit(1787199645.064:2722): avc: denied { create } for pid=7508 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 199.747079][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.897086][ T29] audit: type=1326 audit(1787199645.074:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 200.128706][ T29] audit: type=1326 audit(1787199645.074:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 200.362039][ T29] audit: type=1326 audit(1787199645.074:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 200.476639][ T29] audit: type=1326 audit(1787199645.074:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 200.656690][ T29] audit: type=1326 audit(1787199645.084:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 200.919208][ T7538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.911'. [ 200.982969][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 200.982996][ T29] audit: type=1400 audit(1787199646.464:2790): avc: denied { write } for pid=7534 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.170917][ T7524] Set syz0 is full, maxelem 65536 reached [ 201.196789][ T29] audit: type=1326 audit(1787199646.674:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a5a5ce90e code=0x7ffc0000 [ 201.237450][ T29] audit: type=1326 audit(1787199646.724:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 201.270108][ T29] audit: type=1326 audit(1787199646.754:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.2.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 201.562418][ T7551] lo: Caught tx_queue_len zero misconfig [ 202.280634][ T29] audit: type=1400 audit(1787199647.764:2794): avc: denied { read } for pid=7562 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.453480][ T7560] Set syz0 is full, maxelem 65536 reached [ 203.762410][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.925'. [ 204.508368][ T7593] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.538181][ T29] audit: type=1400 audit(1787199650.014:2795): avc: denied { append } for pid=7591 comm="syz.5.927" name="trace_pipe" dev="tracefs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 204.582842][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.927'. [ 204.597886][ T29] audit: type=1400 audit(1787199650.064:2796): avc: denied { ioctl } for pid=7590 comm="syz.3.928" path="socket:[15049]" dev="sockfs" ino=15049 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.652036][ T29] audit: type=1400 audit(1787199650.074:2797): avc: denied { write } for pid=7590 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.680219][ T29] audit: type=1400 audit(1787199650.124:2798): avc: denied { append } for pid=7591 comm="syz.5.927" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.707295][ T29] audit: type=1400 audit(1787199650.164:2799): avc: denied { ioctl } for pid=7591 comm="syz.5.927" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.734104][ T7602] tmpfs: Bad value for 'mpol' [ 204.767423][ T7593] hsr_slave_1 (unregistering): left promiscuous mode [ 205.192858][ T7615] netlink: 56 bytes leftover after parsing attributes in process `syz.2.935'. [ 205.945015][ T7625] xt_hashlimit: size too large, truncated to 1048576 [ 207.943655][ T7611] Set syz0 is full, maxelem 65536 reached [ 208.050390][ T7659] bridge1: entered promiscuous mode [ 208.068646][ T7659] bridge1: entered allmulticast mode [ 208.090255][ T7659] team0: Port device bridge1 added [ 208.691376][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.950'. [ 209.825981][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 209.826066][ T29] audit: type=1400 audit(1787199655.304:2802): avc: denied { bind } for pid=7737 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.900123][ T29] audit: type=1326 audit(1787199655.384:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb797bee0d9 code=0x0 [ 209.931124][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 210.089335][ T29] audit: type=1400 audit(1787199655.574:2804): avc: denied { write } for pid=7748 comm="syz.0.957" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.144892][ T29] audit: type=1400 audit(1787199655.574:2805): avc: denied { open } for pid=7748 comm="syz.0.957" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.205689][ T29] audit: type=1400 audit(1787199655.624:2806): avc: denied { write } for pid=7748 comm="syz.0.957" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 210.258073][ T29] audit: type=1400 audit(1787199655.624:2807): avc: denied { ioctl } for pid=7748 comm="syz.0.957" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.418381][ T7749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.425906][ T7749] IPv6: NLM_F_CREATE should be set when creating new route [ 211.085430][ T7753] Set syz0 is full, maxelem 65536 reached [ 211.531425][ T29] audit: type=1400 audit(1787199657.014:2808): avc: denied { read } for pid=7773 comm="syz.5.964" path="socket:[15274]" dev="sockfs" ino=15274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.718321][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 211.822745][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 211.916603][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=7794 comm=syz.3.973 [ 211.979160][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7794 comm=syz.3.973 [ 212.062171][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7794 comm=syz.3.973 [ 212.075151][ T7794] netlink: 4604 bytes leftover after parsing attributes in process `syz.3.973'. [ 212.098231][ T7801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.974'. [ 212.176088][ T7809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'. [ 212.238239][ T29] audit: type=1400 audit(1787199657.724:2809): avc: denied { setopt } for pid=7790 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 212.437092][ T7827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.976'. [ 213.210005][ T29] audit: type=1400 audit(1787199658.694:2810): avc: denied { bind } for pid=7876 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.866669][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.423367][ T7881] netlink: 'syz.0.979': attribute type 2 has an invalid length. [ 215.489266][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 215.552295][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 215.686544][ T29] audit: type=1400 audit(1787199661.164:2811): avc: denied { connect } for pid=7905 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.710818][ T29] audit: type=1400 audit(1787199661.194:2812): avc: denied { sqpoll } for pid=7905 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.763281][ T7910] netlink: 52 bytes leftover after parsing attributes in process `syz.2.988'. [ 215.988904][ T7916] netlink: 44 bytes leftover after parsing attributes in process `syz.3.990'. [ 216.456803][ T29] audit: type=1400 audit(1787199661.934:2813): avc: denied { relabelfrom } for pid=7921 comm="syz.5.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 216.504731][ T29] audit: type=1400 audit(1787199661.934:2814): avc: denied { relabelto } for pid=7921 comm="syz.5.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.619460][ T7943] netlink: 'syz.3.997': attribute type 12 has an invalid length. [ 217.628664][ T29] audit: type=1400 audit(1787199663.104:2815): avc: denied { attach_queue } for pid=7942 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.629580][ T7943] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 217.710864][ T7943] netlink: 148 bytes leftover after parsing attributes in process `syz.3.997'. [ 217.786787][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.844520][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 217.900586][ T29] audit: type=1326 audit(1787199663.384:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.5.999" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 217.900648][ T29] audit: type=1326 audit(1787199663.384:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.5.999" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 217.900681][ T29] audit: type=1326 audit(1787199663.384:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.5.999" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 217.900961][ T29] audit: type=1326 audit(1787199663.384:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.5.999" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 218.039751][ T7956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1000'. [ 218.399151][ T29] audit: type=1326 audit(1787199663.384:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.5.999" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 218.401678][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.999'. [ 218.447279][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.451016][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.570373][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.5.999'. [ 218.961856][ T7968] batman_adv: batadv0: Adding interface: vlan2 [ 218.992292][ T7968] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.192596][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.270027][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.363601][ T7968] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 220.639577][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1013'. [ 220.711674][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 221.061208][ T8010] 9pnet_virtio: no channels available for device nsns processed 0 [ 221.061208][ T8010] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 221.061208][ T8010] [ 222.113419][ T6418] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.151958][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 222.151975][ T29] audit: type=1400 audit(1787199667.634:3395): avc: denied { create } for pid=8029 comm="syz.5.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.184057][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.211055][ T29] audit: type=1400 audit(1787199667.684:3396): avc: denied { write } for pid=8029 comm="syz.5.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.388364][ T29] audit: type=1400 audit(1787199667.874:3397): avc: denied { mounton } for pid=8040 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 222.545279][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.548863][ T8039] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 222.548946][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 222.570503][ T8047] 9pnet_virtio: no channels available for device nsns processed 0 [ 222.570503][ T8047] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 222.570503][ T8047] [ 222.750296][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.834831][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.846047][ T4066] rpcbind: server 127.0.0.1 not responding, timed out [ 223.087327][ T29] audit: type=1400 audit(1787199668.544:3398): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 223.181034][ T68] bridge_slave_1: left allmulticast mode [ 223.194174][ T68] bridge_slave_1: left promiscuous mode [ 223.200649][ T29] audit: type=1400 audit(1787199668.554:3399): avc: denied { search } for pid=3021 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.228968][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.262192][ T68] bridge_slave_0: left allmulticast mode [ 223.270004][ T29] audit: type=1400 audit(1787199668.554:3400): avc: denied { search } for pid=3021 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.276464][ T68] bridge_slave_0: left promiscuous mode [ 223.309860][ T29] audit: type=1400 audit(1787199668.554:3401): avc: denied { search } for pid=3021 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.342385][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.368556][ T29] audit: type=1400 audit(1787199668.554:3402): avc: denied { read } for pid=3021 comm="dhcpcd" name="n30" dev="tmpfs" ino=2542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.397642][ T29] audit: type=1400 audit(1787199668.554:3403): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.424080][ T29] audit: type=1400 audit(1787199668.554:3404): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.751003][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.794375][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.825928][ T68] bond0 (unregistering): Released all slaves [ 224.197434][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 224.248673][ T68] hsr_slave_0: left promiscuous mode [ 224.270750][ T68] hsr_slave_1: left promiscuous mode [ 224.289617][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.304848][ T8098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1035'. [ 224.318007][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.337585][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.346695][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.360188][ T8101] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1035'. [ 224.382102][ T68] veth1_macvtap: left promiscuous mode [ 224.387839][ T68] veth0_macvtap: left promiscuous mode [ 224.401712][ T68] veth1_vlan: left promiscuous mode [ 224.417829][ T68] veth0_vlan: left promiscuous mode [ 225.108765][ T68] team0 (unregistering): Port device team_slave_1 removed [ 225.128439][ T68] team0 (unregistering): Port device team_slave_0 removed [ 225.135206][ T8109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1040'. [ 225.342493][ T8101] bridge0: left promiscuous mode [ 225.347741][ T8101] bridge0: left allmulticast mode [ 225.354689][ T8101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1035'. [ 225.378894][ T8119] 9pnet_virtio: no channels available for device nsns processed 0 [ 225.378894][ T8119] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 225.378894][ T8119] [ 225.669957][ T68] IPVS: stop unused estimator thread 0... [ 226.181872][ T8149] netlink: 'syz.2.1046': attribute type 13 has an invalid length. [ 226.331536][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.338936][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.346131][ T8040] bridge_slave_0: entered allmulticast mode [ 226.353135][ T8040] bridge_slave_0: entered promiscuous mode [ 226.360466][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 226.367606][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.374729][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.385148][ T8040] bridge_slave_1: entered allmulticast mode [ 226.392209][ T8040] bridge_slave_1: entered promiscuous mode [ 226.410982][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.422187][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.442958][ T8040] team0: Port device team_slave_0 added [ 226.450936][ T8040] team0: Port device team_slave_1 added [ 226.502137][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1049'. [ 226.517045][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.529685][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.570385][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 226.581140][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.603037][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.610361][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.636777][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.680783][ T8040] hsr_slave_0: entered promiscuous mode [ 226.687015][ T8040] hsr_slave_1: entered promiscuous mode [ 226.695512][ T8040] debugfs: 'hsr0' already exists in 'hsr' [ 226.701369][ T8040] Cannot create hsr debugfs directory [ 227.516284][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 227.650138][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 228.033940][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 228.033959][ T29] audit: type=1400 audit(1787199673.514:3421): avc: denied { write } for pid=8315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.106172][ T29] audit: type=1400 audit(1787199673.574:3422): avc: denied { write } for pid=8333 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.128582][ T8040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.157553][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.170082][ T8040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.187356][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.198242][ T8336] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 228.239176][ T8040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.258318][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.280380][ T8040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.292393][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.364503][ T29] audit: type=1400 audit(1787199673.844:3423): avc: denied { write } for pid=8340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.383191][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.413678][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.423671][ T29] audit: type=1400 audit(1787199673.914:3424): avc: denied { write } for pid=8363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.460131][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.467321][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.495172][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.502304][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.603666][ T29] audit: type=1400 audit(1787199674.084:3425): avc: denied { mount } for pid=8381 comm="syz.3.1069" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 228.687578][ T29] audit: type=1400 audit(1787199674.164:3426): avc: denied { remount } for pid=8390 comm="syz.5.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.765777][ T29] audit: type=1400 audit(1787199674.224:3427): avc: denied { write } for pid=8371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.836499][ T29] audit: type=1400 audit(1787199674.284:3428): avc: denied { write } for pid=8405 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.868976][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.987697][ T8040] veth0_vlan: entered promiscuous mode [ 229.007741][ T8040] veth1_vlan: entered promiscuous mode [ 229.038499][ T8040] veth0_macvtap: entered promiscuous mode [ 229.060665][ T8040] veth1_macvtap: entered promiscuous mode [ 229.085224][ T29] audit: type=1400 audit(1787199674.564:3429): avc: denied { write } for pid=8409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.092053][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.156744][ T29] audit: type=1400 audit(1787199674.634:3430): avc: denied { write } for pid=8429 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.160734][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.242159][ T4073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.254138][ T4073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.276896][ T4073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.291140][ T4073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.630296][ T8452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1075'. [ 231.208870][ T8497] loop0: detected capacity change from 0 to 512 [ 231.219252][ T8497] EXT4-fs: Ignoring removed bh option [ 231.225651][ T8499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1084'. [ 231.235928][ T8497] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.253475][ T8497] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 231.275262][ T8497] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 231.291216][ T8497] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.323397][ T8497] EXT4-fs warning (device loop0): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.364458][ T8497] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 231.385920][ T8497] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1083: Invalid block bitmap block 0 in block_group 0 [ 231.405484][ T8497] loop0: lost filesystem error report for type 5 error -117 [ 231.405641][ T8497] EXT4-fs (loop0): Remounting filesystem read-only [ 231.413025][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 231.413051][ C1] EXT4-fs (loop0): last error at time 1787199676: ext4_read_block_bitmap_nowait:483 [ 231.471665][ T8497] EXT4-fs (loop0): 1 orphan inode deleted [ 231.478122][ T8497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.526935][ T8497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1083'. [ 231.711036][ T8515] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1087'. [ 231.721535][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.668572][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'. [ 232.836370][ T8546] loop0: detected capacity change from 0 to 256 [ 233.223386][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b355400: rx timeout, send abort [ 233.339139][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 233.339190][ T29] audit: type=1400 audit(1787199678.814:3443): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 233.367979][ T29] audit: type=1400 audit(1787199678.814:3444): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.368013][ T29] audit: type=1400 audit(1787199678.814:3445): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.368040][ T29] audit: type=1400 audit(1787199678.814:3446): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.368068][ T29] audit: type=1400 audit(1787199678.814:3447): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.368178][ T29] audit: type=1400 audit(1787199678.834:3448): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.368205][ T29] audit: type=1400 audit(1787199678.834:3449): avc: denied { getattr } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.632912][ T29] audit: type=1400 audit(1787199679.114:3450): avc: denied { mount } for pid=8559 comm="syz.4.1101" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 233.689190][ T29] audit: type=1400 audit(1787199679.174:3451): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 233.722665][ T29] audit: type=1400 audit(1787199679.174:3452): avc: denied { unmount } for pid=8040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 233.742863][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b355400: abort rx timeout. Force session deactivation [ 234.477500][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1105'. [ 234.711896][ T8586] Set syz1 is full, maxelem 6117 reached [ 234.822911][ T8594] netlink: 'syz.0.1112': attribute type 10 has an invalid length. [ 234.831020][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.838185][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.847778][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.854908][ T8594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.862290][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.869440][ T8594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.920441][ T8594] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.963102][ T8594] loop0: detected capacity change from 0 to 512 [ 235.007771][ T8594] EXT4-fs error (device loop0): ext4_iget_extra_inode:5152: inode #15: comm syz.0.1112: corrupted in-inode xattr: invalid ea_ino [ 235.054601][ T8594] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.054788][ T8594] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1112: couldn't read orphan inode 15 (err -117) [ 235.064114][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 235.064155][ C1] EXT4-fs (loop0): initial error at time 1787199680: ext4_iget_extra_inode:5152: inode 15 [ 235.064189][ C1] EXT4-fs (loop0): last error at time 1787199680: ext4_iget_extra_inode:5152: inode 15 [ 235.436793][ T8594] loop0: lost filesystem error report for type 5 error -117 [ 235.444487][ T8594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.487124][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 235.822461][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.893980][ T8614] loop0: detected capacity change from 0 to 1024 [ 235.929171][ T8614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.047350][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.319365][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1123'. [ 236.806227][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1120'. [ 236.918944][ T8644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=8644 comm=syz.2.1124 [ 237.011862][ T8648] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 237.037979][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 237.131797][ T8648] hsr_slave_1 (unregistering): left promiscuous mode [ 237.681294][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 237.919015][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 238.066762][ T8681] loop0: detected capacity change from 0 to 512 [ 238.233331][ T8681] EXT4-fs: Ignoring removed oldalloc option [ 238.634814][ T8681] EXT4-fs: journaled quota format not specified [ 238.826391][ T8693] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.842484][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 238.854524][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 238.854541][ T29] audit: type=1400 audit(1787199684.334:3465): avc: denied { ioctl } for pid=8695 comm="syz.5.1142" path="socket:[18943]" dev="sockfs" ino=18943 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.142471][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1144'. [ 239.316426][ T8710] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1146'. [ 239.798894][ T8714] syzkaller1: entered promiscuous mode [ 239.811512][ T8714] syzkaller1: entered allmulticast mode [ 239.969050][ T8726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1152'. [ 239.991670][ T8730] ip_tables: iptables: counters copy to user failed while replacing table [ 240.045848][ T29] audit: type=1400 audit(1787199685.524:3466): avc: denied { getopt } for pid=8733 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.255696][ T29] audit: type=1326 audit(1787199685.714:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 240.284729][ T29] audit: type=1326 audit(1787199685.714:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 240.315311][ T29] audit: type=1326 audit(1787199685.714:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 240.522461][ T8750] loop0: detected capacity change from 0 to 512 [ 240.673177][ T8750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.859491][ T29] audit: type=1326 audit(1787199685.714:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 240.890512][ T8750] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.917806][ T8750] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.934041][ T8750] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 241.004914][ T29] audit: type=1326 audit(1787199685.724:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f37eef5e0d9 code=0x7ffc0000 [ 241.021049][ T8750] audit: backlog limit exceeded [ 241.157034][ T8764] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 241.227650][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'. [ 241.343410][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.409595][ T8783] loop0: detected capacity change from 0 to 512 [ 241.423709][ T8783] EXT4-fs: Ignoring removed oldalloc option [ 241.460392][ T8783] EXT4-fs: journaled quota format not specified [ 241.563851][ T8788] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1167'. [ 242.596283][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1184'. [ 242.813461][ T8828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1187'. [ 243.431241][ T8829] xt_CT: No such helper "netbios-ns" [ 243.754979][ T8854] loop0: detected capacity change from 0 to 512 [ 243.771687][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'. [ 243.804106][ T8854] EXT4-fs: Ignoring removed oldalloc option [ 243.811545][ T8854] EXT4-fs: journaled quota format not specified [ 244.153562][ T8879] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1206'. [ 244.354085][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1207'. [ 244.382666][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1207'. [ 244.435203][ T8886] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(15) [ 244.567700][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 244.567788][ T29] audit: type=1400 audit(1787199690.054:3554): avc: denied { connect } for pid=8889 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.706787][ T8864] Set syz1 is full, maxelem 6117 reached [ 244.770813][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 245.227257][ T4062] rpcbind: server 127.0.0.1 not responding, timed out [ 245.342731][ T8921] netlink: 'syz.5.1217': attribute type 39 has an invalid length. [ 246.261308][ T8937] loop0: detected capacity change from 0 to 512 [ 246.358755][ T8937] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 246.412725][ T8937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 246.426297][ T8937] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.433460][ T8937] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1223: bad orphan inode 3 [ 246.443784][ T8937] loop0: lost filesystem error report for type 5 error -117 [ 246.444009][ T8937] EXT4-fs (loop0): Remounting filesystem read-only [ 246.451367][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 246.451400][ C0] EXT4-fs (loop0): initial error at time 1787199691: ext4_orphan_get:1425 [ 246.451446][ C0] EXT4-fs (loop0): last error at time 1787199691: ext4_orphan_get:1425 [ 246.481953][ T8937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 246.495853][ T8937] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1223: dx entry: limit 0 != root limit 125 [ 246.513626][ T8937] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1223: Corrupt directory, running e2fsck is recommended [ 246.546623][ T29] audit: type=1400 audit(1787199692.024:3555): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file7" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.694921][ T8955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1229'. [ 246.730670][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 246.831176][ T8950] Set syz0 is full, maxelem 65536 reached [ 246.964280][ T8970] Set syz1 is full, maxelem 6117 reached [ 247.378987][ T8984] can0: slcan on ttyS3. [ 247.497014][ T8983] can0 (unregistered): slcan off ttyS3. [ 247.542835][ T29] audit: type=1400 audit(1787199693.024:3556): avc: denied { write } for pid=8986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.545801][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1238'. [ 247.612297][ T29] audit: type=1400 audit(1787199693.084:3557): avc: denied { write } for pid=9007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.694411][ T9010] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1240'. [ 248.348679][ T29] audit: type=1400 audit(1787199693.824:3558): avc: denied { write } for pid=9016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.442434][ T29] audit: type=1400 audit(1787199693.924:3559): avc: denied { write } for pid=9031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.929991][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1252'. [ 248.982400][ T9026] Set syz0 is full, maxelem 65536 reached [ 249.336075][ T29] audit: type=1400 audit(1787199694.814:3560): avc: denied { relabelto } for pid=9078 comm="syz.5.1259" name="177" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 249.369041][ T29] audit: type=1400 audit(1787199694.814:3561): avc: denied { associate } for pid=9078 comm="syz.5.1259" name="177" dev="tmpfs" ino=965 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 249.667036][ T9088] Set syz1 is full, maxelem 6117 reached [ 249.871879][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 249.928392][ T9094] 9p: Bad value for 'rfdno' [ 250.239559][ T29] audit: type=1326 audit(1787199695.724:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.275369][ T29] audit: type=1326 audit(1787199695.724:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.299742][ T9097] Set syz0 is full, maxelem 65536 reached [ 250.314695][ T29] audit: type=1326 audit(1787199695.724:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.340719][ T29] audit: type=1326 audit(1787199695.724:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.398141][ T29] audit: type=1326 audit(1787199695.724:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.426695][ T29] audit: type=1326 audit(1787199695.724:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.452465][ T29] audit: type=1326 audit(1787199695.724:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.498092][ T29] audit: type=1326 audit(1787199695.724:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.542424][ T29] audit: type=1326 audit(1787199695.724:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.589495][ T29] audit: type=1326 audit(1787199695.724:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.3.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82df8e0d9 code=0x7ffc0000 [ 250.929036][ T9117] loop0: detected capacity change from 0 to 512 [ 250.947492][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 250.952251][ T9117] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1269: inode has both inline data and extents flags [ 250.969708][ T9117] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.970070][ T9117] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1269: couldn't read orphan inode 15 (err -117) [ 250.979274][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 250.979300][ C0] EXT4-fs (loop0): initial error at time 1787199696: ext4_orphan_get:1399: inode 15 [ 250.979350][ C0] EXT4-fs (loop0): last error at time 1787199696: ext4_orphan_get:1399: inode 15 [ 251.018220][ T9117] loop0: lost filesystem error report for type 5 error -117 [ 251.018877][ T9117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.099979][ T9145] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1278'. [ 251.126440][ T11] IPVS: starting estimator thread 0... [ 251.145207][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.225313][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 251.234468][ T9149] IPVS: using max 2256 ests per chain, 112800 per kthread [ 251.498345][ T9173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1285'. [ 251.520569][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1287'. [ 252.101844][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 253.157922][ T9183] Set syz0 is full, maxelem 65536 reached [ 253.497744][ T9205] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 253.515722][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 253.710089][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1300'. [ 253.955022][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 254.028297][ T9224] nfs4: Unknown parameter 'NLBL_MGMT' [ 254.042480][ T9224] 9pnet_virtio: no channels available for device syz [ 254.247442][ T9231] tmpfs: Bad value for 'mpol' [ 254.819431][ T9252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1309'. [ 255.203609][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 255.540395][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1311'. [ 255.688340][ T9276] loop0: detected capacity change from 0 to 512 [ 255.699358][ T9276] EXT4-fs: Ignoring removed bh option [ 255.728701][ T9276] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.740790][ T9276] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 255.759277][ T9276] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 255.778230][ T9276] EXT4-fs (loop0): orphan cleanup on readonly fs [ 255.784816][ T9276] __quota_error: 93 callbacks suppressed [ 255.784828][ T9276] Quota error (device loop0): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 255.815851][ T9276] EXT4-fs warning (device loop0): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 255.851714][ T9276] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 255.872762][ T9276] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1318: Invalid block bitmap block 0 in block_group 0 [ 255.896826][ T9276] loop0: lost filesystem error report for type 5 error -117 [ 255.897004][ T9276] EXT4-fs (loop0): Remounting filesystem read-only [ 255.910911][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 255.910928][ C0] EXT4-fs (loop0): last error at time 1787199701: ext4_read_block_bitmap_nowait:483 [ 255.946821][ T9276] EXT4-fs (loop0): 1 orphan inode deleted [ 255.963835][ T9276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.990440][ T9276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1318'. [ 256.094217][ T9286] tipc: Enabling of bearer rejected, failed to enable media [ 256.155115][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.271355][ T9293] loop0: detected capacity change from 0 to 512 [ 256.275949][ T9293] EXT4-fs: Ignoring removed oldalloc option [ 256.279437][ T9293] EXT4-fs: journaled quota format not specified [ 256.409179][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 257.152643][ T9312] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1330'. [ 257.771009][ T9328] loop0: detected capacity change from 0 to 512 [ 257.776937][ T9325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.784580][ T9328] EXT4-fs: Ignoring removed bh option [ 257.784636][ T9328] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.797948][ T9325] IPv6: NLM_F_CREATE should be set when creating new route [ 257.807995][ T9328] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 257.821907][ T9328] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 257.831365][ T9328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 257.841356][ T9328] Quota error (device loop0): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 257.866925][ T9328] EXT4-fs warning (device loop0): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.891036][ T9328] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 257.899370][ T9337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1331'. [ 257.946468][ T9328] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1336: Invalid block bitmap block 0 in block_group 0 [ 257.960592][ T9328] loop0: lost filesystem error report for type 5 error -117 [ 257.965404][ T9328] EXT4-fs (loop0): Remounting filesystem read-only [ 257.972777][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 257.972794][ C0] EXT4-fs (loop0): last error at time 1787199703: ext4_read_block_bitmap_nowait:483 [ 258.015353][ T9328] EXT4-fs (loop0): 1 orphan inode deleted [ 258.022182][ T9328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.189168][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.969033][ T29] audit: type=1400 audit(1787199704.444:3665): avc: denied { ioctl } for pid=9364 comm="syz.3.1347" path="socket:[20135]" dev="sockfs" ino=20135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.119194][ T9372] __nla_validate_parse: 2 callbacks suppressed [ 259.119215][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1349'. [ 259.153567][ T29] audit: type=1400 audit(1787199704.634:3666): avc: denied { write } for pid=9376 comm="syz.2.1351" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 259.181229][ T29] audit: type=1400 audit(1787199704.634:3667): avc: denied { open } for pid=9376 comm="syz.2.1351" path="/306/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 259.227037][ T9384] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1352'. [ 259.309797][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 260.107361][ T9490] loop0: detected capacity change from 0 to 512 [ 260.156164][ T9490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.178044][ T9490] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.183289][ T29] audit: type=1400 audit(1787199705.664:3668): avc: denied { getopt } for pid=9497 comm="syz.4.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.218418][ T9491] EXT4-fs error (device loop0): ext4_do_update_inode:5714: inode #2: comm syz.0.1357: corrupted inode contents [ 260.265996][ T29] audit: type=1400 audit(1787199705.684:3669): avc: denied { write } for pid=9487 comm="syz.0.1357" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.293199][ T9491] EXT4-fs (loop0): Remounting filesystem read-only [ 260.416483][ T9508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1355'. [ 260.662624][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.690307][ T9509] Set syz0 is full, maxelem 65536 reached [ 260.744241][ T29] audit: type=1400 audit(1787199706.014:3670): avc: denied { write } for pid=9487 comm="syz.0.1357" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.031401][ T9521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1366'. [ 261.279972][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 261.294645][ T9534] veth0: Caught tx_queue_len zero misconfig [ 261.455306][ T9549] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1373'. [ 261.543504][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1378'. [ 261.611908][ T9554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1377'. [ 262.216108][ T9576] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1385'. [ 262.227775][ T29] audit: type=1400 audit(1787199707.704:3671): avc: denied { getattr } for pid=9575 comm="syz.5.1385" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.496782][ T9583] ip_tables: iptables: counters copy to user failed while replacing table [ 262.526361][ T29] audit: type=1400 audit(1787199708.004:3672): avc: denied { mount } for pid=9582 comm="syz.3.1387" name="/" dev="hugetlbfs" ino=20377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 264.307599][ T9626] __nla_validate_parse: 2 callbacks suppressed [ 264.307621][ T9626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1399'. [ 264.397378][ T9628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 264.989345][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.008499][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.012222][ T9634] syz_tun: refused to change device tx_queue_len [ 265.023111][ T9634] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 265.031076][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.056117][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.110884][ T6601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.137527][ T4073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.150281][ T9639] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1404'. [ 265.355228][ T4073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.495359][ T4073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.583277][ T4073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.840608][ T4073] bridge_slave_1: left allmulticast mode [ 265.892947][ T4073] bridge_slave_1: left promiscuous mode [ 265.939018][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.953807][ T4073] bridge_slave_0: left allmulticast mode [ 265.968004][ T4073] bridge_slave_0: left promiscuous mode [ 265.973854][ T4073] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.156251][ T4073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.174556][ T4073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.189798][ T4073] bond0 (unregistering): Released all slaves [ 266.287947][ T29] audit: type=1400 audit(1787199711.774:3673): avc: denied { write } for pid=9658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.498405][ T4073] hsr_slave_0: left promiscuous mode [ 266.514892][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.533489][ T29] audit: type=1400 audit(1787199712.014:3674): avc: denied { write } for pid=9680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.558545][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.637023][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.638503][ T9685] atomic_op ffff88811f1d5528 conn xmit_atomic 0000000000000000 [ 266.644727][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.661509][ T4073] veth1_vlan: left promiscuous mode [ 266.667258][ T4073] veth0_vlan: left promiscuous mode [ 266.725249][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1412'. [ 266.769703][ T4073] team0 (unregistering): Port device team_slave_1 removed [ 266.793923][ T4073] team0 (unregistering): Port device team_slave_0 removed [ 266.871833][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 267.169178][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.176377][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.196704][ T9651] bridge_slave_0: entered allmulticast mode [ 267.203559][ T29] audit: type=1400 audit(1787199712.684:3675): avc: denied { write } for pid=9700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.267537][ T9729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1419'. [ 267.351764][ T9651] bridge_slave_0: entered promiscuous mode [ 267.386599][ T29] audit: type=1400 audit(1787199712.864:3676): avc: denied { write } for pid=9730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.797455][ T4073] IPVS: stop unused estimator thread 0... [ 267.803339][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.814711][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.826848][ T9651] bridge_slave_1: entered allmulticast mode [ 267.833614][ T9651] bridge_slave_1: entered promiscuous mode [ 267.845131][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 267.879183][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.924236][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.968550][ T9651] team0: Port device team_slave_0 added [ 267.982816][ T9651] team0: Port device team_slave_1 added [ 268.060244][ T9744] loop0: detected capacity change from 0 to 256 [ 268.073148][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.081757][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.108507][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.127396][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.144104][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.174630][ T29] audit: type=1400 audit(1787199713.664:3677): avc: denied { write } for pid=9735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.200182][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.409688][ T29] audit: type=1400 audit(1787199713.894:3678): avc: denied { write } for pid=9753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.622456][ T9651] hsr_slave_0: entered promiscuous mode [ 268.628502][ T9651] hsr_slave_1: entered promiscuous mode [ 268.634366][ T9651] debugfs: 'hsr0' already exists in 'hsr' [ 268.640158][ T9651] Cannot create hsr debugfs directory [ 268.646320][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 268.911511][ T9762] Set syz0 is full, maxelem 65536 reached [ 269.033795][ T29] audit: type=1400 audit(1787199714.514:3679): avc: denied { write } for pid=9772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.091895][ T29] audit: type=1400 audit(1787199714.574:3680): avc: denied { write } for pid=9787 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.159240][ T29] audit: type=1400 audit(1787199714.584:3681): avc: denied { ioctl } for pid=9783 comm="syz.0.1427" path="socket:[22687]" dev="sockfs" ino=22687 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.262346][ T9651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.297298][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.319562][ T9651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.353042][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.361526][ T9651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.382691][ T29] audit: type=1400 audit(1787199714.864:3682): avc: denied { write } for pid=9791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.421056][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.446979][ T9651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.471115][ T29] audit: type=1400 audit(1787199714.954:3683): avc: denied { write } for pid=9805 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.505531][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.625178][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.649608][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.675089][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.682235][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.705697][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.712955][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.809101][ T29] audit: type=1400 audit(1787199715.294:3684): avc: denied { write } for pid=9814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.899694][ T29] audit: type=1400 audit(1787199715.364:3685): avc: denied { write } for pid=9833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.025950][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.343295][ T9651] veth0_vlan: entered promiscuous mode [ 270.361071][ T9651] veth1_vlan: entered promiscuous mode [ 270.412485][ T9651] veth0_macvtap: entered promiscuous mode [ 270.427827][ T9651] veth1_macvtap: entered promiscuous mode [ 270.473654][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.495432][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.539304][ T9890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1434'. [ 270.548375][ T4070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.557506][ T4070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.576694][ T4068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.589168][ T4068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.634284][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1437'. [ 271.662169][ T9989] sctp: [Deprecated]: syz.3.1442 (pid 9989) Use of int in max_burst socket option. [ 271.662169][ T9989] Use struct sctp_assoc_value instead [ 271.688418][ T9992] bridge_slave_0: Caught tx_queue_len zero misconfig [ 271.701692][ T9992] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 271.814111][ T9905] Set syz0 is full, maxelem 65536 reached [ 272.097305][T10021] loop4: detected capacity change from 0 to 512 [ 272.114255][T10012] loop0: detected capacity change from 0 to 1764 [ 272.118372][T10021] EXT4-fs: Ignoring removed oldalloc option [ 272.146523][T10021] EXT4-fs: journaled quota format not specified [ 272.172225][T10012] FAULT_INJECTION: forcing a failure. [ 272.172225][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 272.214213][T10012] CPU: 0 UID: 0 PID: 10012 Comm: syz.0.1448 Not tainted syzkaller #0 PREEMPT(lazy) [ 272.214252][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.214272][T10012] Call Trace: [ 272.214279][T10012] [ 272.214289][T10012] __dump_stack+0x1d/0x30 [ 272.214392][T10012] dump_stack_lvl+0x95/0xd0 [ 272.214416][T10012] dump_stack+0x15/0x1b [ 272.214444][T10012] should_fail_ex+0x262/0x280 [ 272.214491][T10012] should_failslab+0x8c/0xb0 [ 272.214587][T10012] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 272.214620][T10012] ? skb_clone+0x151/0x1f0 [ 272.214719][T10012] ? skb_clone+0x151/0x1f0 [ 272.214762][T10012] skb_clone+0x151/0x1f0 [ 272.214803][T10012] __netlink_deliver_tap+0x2be/0x510 [ 272.214846][T10012] netlink_unicast+0x656/0x680 [ 272.214886][T10012] netlink_sendmsg+0x5be/0x6f0 [ 272.215014][T10012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.215050][T10012] ____sys_sendmsg+0x532/0x580 [ 272.215092][T10012] ___sys_sendmsg+0x195/0x1e0 [ 272.215157][T10012] ? _raw_spin_unlock+0x9/0x30 [ 272.215217][T10012] __x64_sys_sendmsg+0xd4/0x160 [ 272.215253][T10012] x64_sys_call+0x22ab/0x2550 [ 272.215281][T10012] do_syscall_64+0x112/0x360 [ 272.215361][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.215392][T10012] RIP: 0033:0x7f2a8017e0d9 [ 272.215409][T10012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.215494][T10012] RSP: 002b:00007f2a7ebd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.215522][T10012] RAX: ffffffffffffffda RBX: 00007f2a80405fa0 RCX: 00007f2a8017e0d9 [ 272.215571][T10012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 272.215586][T10012] RBP: 00007f2a7ebd7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.215601][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.215615][T10012] R13: 00007f2a80406038 R14: 00007f2a80405fa0 R15: 00007ffe5a37f038 [ 272.215643][T10012] [ 272.771312][T10027] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 273.130862][T10033] loop4: detected capacity change from 0 to 512 [ 273.139487][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 273.139512][ T29] audit: type=1400 audit(1787199718.624:3699): avc: denied { unmount } for pid=8040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 273.217446][T10033] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1452: inode has both inline data and extents flags [ 273.244467][T10033] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 273.245577][T10033] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1452: couldn't read orphan inode 15 (err -117) [ 273.254912][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 273.254930][ C1] EXT4-fs (loop4): initial error at time 1787199718: ext4_orphan_get:1399: inode 15 [ 273.254965][ C1] EXT4-fs (loop4): last error at time 1787199718: ext4_orphan_get:1399: inode 15 [ 273.371987][T10039] loop0: detected capacity change from 0 to 512 [ 273.388769][T10033] loop4: lost filesystem error report for type 5 error -117 [ 273.390815][T10033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.411674][T10039] EXT4-fs: Ignoring removed oldalloc option [ 273.425274][T10039] EXT4-fs: journaled quota format not specified [ 273.625635][T10049] @0: renamed from bond_slave_1 (while UP) [ 273.928968][T10041] Set syz0 is full, maxelem 65536 reached [ 273.936060][T10056] tmpfs: Bad value for 'mpol' [ 274.248428][T10062] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1463'. [ 274.297968][ T9651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.331901][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 274.349390][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'. [ 274.370678][T10068] tap0: tun_chr_ioctl cmd 1074025672 [ 274.376368][T10068] tap0: ignored: set checksum enabled [ 274.384969][T10073] netlink: 2600 bytes leftover after parsing attributes in process `syz.2.1468'. [ 274.398323][T10068] loop0: detected capacity change from 0 to 512 [ 274.405474][T10068] ext4: Unknown parameter 'subj_user' [ 274.483349][T10083] loop4: detected capacity change from 0 to 512 [ 274.492323][T10083] EXT4-fs: Ignoring removed oldalloc option [ 274.564249][T10083] EXT4-fs: journaled quota format not specified [ 275.125303][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 275.217279][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 275.442255][T10115] loop4: detected capacity change from 0 to 256 [ 275.453064][ T29] audit: type=1400 audit(1787199720.934:3700): avc: denied { write } for pid=10116 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.488678][ T29] audit: type=1400 audit(1787199720.934:3701): avc: denied { bind } for pid=10116 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.637917][T10107] Set syz0 is full, maxelem 65536 reached [ 275.797870][ T29] audit: type=1400 audit(1787199721.284:3702): avc: denied { read } for pid=10119 comm="syz.3.1486" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 275.863619][T10137] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1489'. [ 275.977595][ T29] audit: type=1400 audit(1787199721.284:3703): avc: denied { open } for pid=10119 comm="syz.3.1486" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 276.002606][ T29] audit: type=1400 audit(1787199721.284:3704): avc: denied { ioctl } for pid=10119 comm="syz.3.1486" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 276.128005][ T29] audit: type=1400 audit(1787199721.614:3705): avc: denied { bind } for pid=10141 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.391933][T10147] FAULT_INJECTION: forcing a failure. [ 276.391933][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 276.404864][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.5.1494 Not tainted syzkaller #0 PREEMPT(lazy) [ 276.404960][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.404975][T10147] Call Trace: [ 276.404983][T10147] [ 276.404993][T10147] __dump_stack+0x1d/0x30 [ 276.405021][T10147] dump_stack_lvl+0x95/0xd0 [ 276.405046][T10147] dump_stack+0x15/0x1b [ 276.405146][T10147] should_fail_ex+0x262/0x280 [ 276.405182][T10147] should_failslab+0x8c/0xb0 [ 276.405248][T10147] __kmalloc_noprof+0xd4/0x4a0 [ 276.405335][T10147] ? alloc_pipe_info+0x1c8/0x340 [ 276.405364][T10147] ? alloc_pipe_info+0x1c8/0x340 [ 276.405428][T10147] alloc_pipe_info+0x1c8/0x340 [ 276.405457][T10147] splice_direct_to_actor+0x593/0x680 [ 276.405512][T10147] ? __file_has_perm+0x3d9/0x430 [ 276.405544][T10147] ? __pfx_direct_splice_actor+0x10/0x10 [ 276.405625][T10147] do_splice_direct+0x119/0x1a0 [ 276.405659][T10147] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 276.405699][T10147] do_sendfile+0x37d/0x640 [ 276.405793][T10147] __x64_sys_sendfile64+0x105/0x150 [ 276.405826][T10147] x64_sys_call+0x1015/0x2550 [ 276.405855][T10147] do_syscall_64+0x112/0x360 [ 276.405884][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.405971][T10147] RIP: 0033:0x7f37eef5e0d9 [ 276.405989][T10147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.406010][T10147] RSP: 002b:00007f37ed9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.406033][T10147] RAX: ffffffffffffffda RBX: 00007f37ef1e5fa0 RCX: 00007f37eef5e0d9 [ 276.406117][T10147] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 276.406131][T10147] RBP: 00007f37ed9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.406145][T10147] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 276.406158][T10147] R13: 00007f37ef1e6038 R14: 00007f37ef1e5fa0 R15: 00007fffe8a469a8 [ 276.406180][T10147] [ 276.686894][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 277.045136][T10168] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1503'. [ 277.790628][T10155] Set syz0 is full, maxelem 65536 reached [ 278.014421][T10183] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1507'. [ 278.605926][T10180] loop4: detected capacity change from 0 to 2048 [ 278.705997][T10180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.719217][ T29] audit: type=1400 audit(1787199724.184:3706): avc: denied { write } for pid=10178 comm="syz.4.1506" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.803563][T10195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1509'. [ 278.888195][ T29] audit: type=1400 audit(1787199724.184:3707): avc: denied { append } for pid=10178 comm="syz.4.1506" path="/14/file0/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.244835][T10203] x_tables: duplicate entry at hook 3 [ 279.474898][ T68] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 279.491113][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 279.506424][ T68] EXT4-fs (loop4): This should not happen!! Data will be lost [ 279.506424][ T68] [ 279.516433][ T68] EXT4-fs (loop4): Total free blocks count 0 [ 279.522609][ T68] EXT4-fs (loop4): Free/Dirty block details [ 279.528780][ T68] EXT4-fs (loop4): free_blocks=2415919104 [ 279.561763][ T68] EXT4-fs (loop4): dirty_blocks=3440 [ 279.567224][ T68] EXT4-fs (loop4): Block reservation details [ 279.573247][ T68] EXT4-fs (loop4): i_reserved_data_blocks=215 [ 279.601737][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1390 with error 28 [ 279.681009][T10214] Set syz0 is full, maxelem 65536 reached [ 279.785631][ T9651] EXT4-fs warning (device loop4): ext4_evict_inode:197: inode #18: comm syz-executor: data will be lost [ 279.798816][T10224] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1521'. [ 279.875114][T10225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1520'. [ 279.895004][ T29] audit: type=1400 audit(1787199725.374:3708): avc: denied { write } for pid=10219 comm="syz.3.1520" path="socket:[23265]" dev="sockfs" ino=23265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.362921][T10231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1523'. [ 280.581056][T10245] x_tables: duplicate underflow at hook 1 [ 280.660797][T10251] x_tables: duplicate underflow at hook 1 [ 280.674390][ T29] audit: type=1400 audit(1787199726.154:3709): avc: denied { mount } for pid=10242 comm="syz.2.1527" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 281.211527][ T29] audit: type=1400 audit(1787199726.694:3710): avc: denied { listen } for pid=10273 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.234679][ T29] audit: type=1400 audit(1787199726.724:3711): avc: denied { read } for pid=10257 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.306663][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1534'. [ 281.613762][T10283] FAULT_INJECTION: forcing a failure. [ 281.613762][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 281.685998][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.2.1538 Not tainted syzkaller #0 PREEMPT(lazy) [ 281.686064][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.686078][T10283] Call Trace: [ 281.686085][T10283] [ 281.686095][T10283] __dump_stack+0x1d/0x30 [ 281.686179][T10283] dump_stack_lvl+0x95/0xd0 [ 281.686207][T10283] dump_stack+0x15/0x1b [ 281.686279][T10283] should_fail_ex+0x262/0x280 [ 281.686356][T10283] should_failslab+0x8c/0xb0 [ 281.686401][T10283] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 281.686521][T10283] ? rxrpc_recvmsg_data+0x615/0x1060 [ 281.686549][T10283] ? rxrpc_recvmsg_data+0x615/0x1060 [ 281.686580][T10283] krealloc_node_align_noprof+0x117/0x2d0 [ 281.686628][T10283] rxrpc_recvmsg_data+0x615/0x1060 [ 281.686659][T10283] rxrpc_recvmsg+0xe06/0x1360 [ 281.686698][T10283] ? __pfx_autoremove_wake_function+0x10/0x10 [ 281.686760][T10283] ? __pfx_rxrpc_recvmsg+0x10/0x10 [ 281.686781][T10283] sock_recvmsg+0xf5/0x120 [ 281.686861][T10283] __sys_recvfrom+0x122/0x200 [ 281.686888][T10283] __x64_sys_recvfrom+0x76/0x90 [ 281.686916][T10283] x64_sys_call+0x14b8/0x2550 [ 281.686950][T10283] do_syscall_64+0x112/0x360 [ 281.686987][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.687014][T10283] RIP: 0033:0x7f3a5a60e0d9 [ 281.687030][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.687098][T10283] RSP: 002b:00007f3a59067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 281.687248][T10283] RAX: ffffffffffffffda RBX: 00007f3a5a895fa0 RCX: 00007f3a5a60e0d9 [ 281.687263][T10283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 281.687278][T10283] RBP: 00007f3a59067090 R08: 0000000000000000 R09: 0000000000000000 [ 281.687292][T10283] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 281.687307][T10283] R13: 00007f3a5a896038 R14: 00007f3a5a895fa0 R15: 00007ffdbfb6a9a8 [ 281.687333][T10283] [ 282.077002][T10292] FAULT_INJECTION: forcing a failure. [ 282.077002][T10292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.109987][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.3.1541 Not tainted syzkaller #0 PREEMPT(lazy) [ 282.110019][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.110057][T10292] Call Trace: [ 282.110067][T10292] [ 282.110078][T10292] __dump_stack+0x1d/0x30 [ 282.110153][T10292] dump_stack_lvl+0x95/0xd0 [ 282.110257][T10292] dump_stack+0x15/0x1b [ 282.110285][T10292] should_fail_ex+0x262/0x280 [ 282.110369][T10292] should_fail+0xb/0x20 [ 282.110408][T10292] should_fail_usercopy+0x1a/0x20 [ 282.110458][T10292] _copy_from_user+0x1c/0xb0 [ 282.110547][T10292] ___sys_sendmsg+0xc1/0x1e0 [ 282.110595][T10292] __x64_sys_sendmsg+0xd4/0x160 [ 282.110647][T10292] x64_sys_call+0x22ab/0x2550 [ 282.110677][T10292] do_syscall_64+0x112/0x360 [ 282.110752][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.110778][T10292] RIP: 0033:0x7fa82df8e0d9 [ 282.110796][T10292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.110880][T10292] RSP: 002b:00007fa82c9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.110906][T10292] RAX: ffffffffffffffda RBX: 00007fa82e215fa0 RCX: 00007fa82df8e0d9 [ 282.110928][T10292] RDX: 0000000024008800 RSI: 00002000000037c0 RDI: 0000000000000003 [ 282.110948][T10292] RBP: 00007fa82c9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.110969][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.110989][T10292] R13: 00007fa82e216038 R14: 00007fa82e215fa0 R15: 00007ffc9a4c96d8 [ 282.111017][T10292] [ 282.642289][T10298] Set syz0 is full, maxelem 65536 reached [ 282.790057][ T29] audit: type=1400 audit(1787199728.274:3712): avc: denied { write } for pid=10308 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.896975][T10313] loop4: detected capacity change from 0 to 512 [ 282.933831][T10313] EXT4-fs: Ignoring removed oldalloc option [ 282.961708][T10313] EXT4-fs: journaled quota format not specified [ 283.679609][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 283.835703][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1552'. [ 283.962105][T10333] netlink: 'syz.4.1555': attribute type 3 has an invalid length. [ 283.986650][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1554'. [ 284.070033][T10337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1556'. [ 285.094279][T10361] Set syz0 is full, maxelem 65536 reached [ 285.115743][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 285.247345][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1562'. [ 286.178285][T10431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1568'. [ 286.785769][T10440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1570'. [ 287.395563][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1581'. [ 287.686028][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 287.728938][T10453] loop4: detected capacity change from 0 to 512 [ 287.949892][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1575'. [ 287.972006][T10446] Set syz0 is full, maxelem 65536 reached [ 288.095845][T10462] loop0: detected capacity change from 0 to 512 [ 288.109225][T10462] EXT4-fs: Ignoring removed oldalloc option [ 288.115786][T10462] EXT4-fs: journaled quota format not specified [ 288.288972][ T29] audit: type=1400 audit(1787199733.774:3713): avc: denied { bind } for pid=10469 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.511106][ T29] audit: type=1400 audit(1787199733.984:3714): avc: denied { write } for pid=10463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.721081][ T29] audit: type=1400 audit(1787199734.184:3715): avc: denied { write } for pid=10481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.086195][T10493] loop0: detected capacity change from 0 to 512 [ 289.106043][T10493] EXT4-fs: inline encryption not supported [ 289.113080][ T29] audit: type=1400 audit(1787199734.604:3716): avc: denied { write } for pid=10483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.144653][T10493] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 289.179449][ T29] audit: type=1400 audit(1787199734.654:3717): avc: denied { write } for pid=10498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.201866][T10493] EXT4-fs (loop0): 1 truncate cleaned up [ 289.216283][T10493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.260377][ T29] audit: type=1400 audit(1787199734.694:3718): avc: denied { write } for pid=10492 comm="syz.0.1578" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.345252][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.477159][T10513] loop0: detected capacity change from 0 to 512 [ 289.495777][T10513] EXT4-fs: Ignoring removed oldalloc option [ 289.533687][T10513] EXT4-fs: journaled quota format not specified [ 289.665477][T10523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1586'. [ 290.453534][T10531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1588'. [ 291.006018][T10519] Set syz0 is full, maxelem 65536 reached [ 291.730764][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 291.829433][ T29] audit: type=1400 audit(1787199737.314:3719): avc: denied { write } for pid=10558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.873627][ T29] audit: type=1400 audit(1787199737.354:3720): avc: denied { write } for pid=10576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.944953][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 292.078451][T10595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1601'. [ 292.488762][T10600] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1603'. [ 292.856524][ T29] audit: type=1400 audit(1787199738.334:3721): avc: denied { write } for pid=10584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.859371][T10586] Set syz0 is full, maxelem 65536 reached [ 293.014818][ T29] audit: type=1400 audit(1787199738.404:3722): avc: denied { write } for pid=10616 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.065424][T10622] loop0: detected capacity change from 0 to 512 [ 293.086765][T10622] EXT4-fs: Ignoring removed oldalloc option [ 293.104076][T10622] EXT4-fs: journaled quota format not specified [ 293.814899][T10632] xt_CT: No such helper "netbios-ns" [ 294.369172][T10649] loop4: detected capacity change from 0 to 512 [ 294.397202][T10649] EXT4-fs: Ignoring removed oldalloc option [ 294.403796][T10649] EXT4-fs: journaled quota format not specified [ 295.080361][T10662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 295.522362][T10665] loop4: detected capacity change from 0 to 512 [ 295.585231][T10655] Set syz0 is full, maxelem 65536 reached [ 295.591347][T10665] EXT4-fs: Ignoring removed bh option [ 295.616795][T10665] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.635632][T10665] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 295.682211][T10665] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 295.690688][T10665] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.697617][T10665] Quota error (device loop4): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 295.708586][T10665] EXT4-fs warning (device loop4): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.724107][T10665] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 295.736501][T10665] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1619: Invalid block bitmap block 0 in block_group 0 [ 295.750289][T10665] loop4: lost filesystem error report for type 5 error -117 [ 295.750530][T10665] EXT4-fs (loop4): Remounting filesystem read-only [ 295.757944][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 295.757970][ C0] EXT4-fs (loop4): last error at time 1787199741: ext4_read_block_bitmap_nowait:483 [ 295.780936][T10665] EXT4-fs (loop4): 1 orphan inode deleted [ 295.791394][T10665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.811110][T10665] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1619'. [ 295.860356][ T9651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.879649][T10687] loop4: detected capacity change from 0 to 256 [ 296.200808][ T29] audit: type=1400 audit(1787199741.684:3723): avc: denied { ioctl } for pid=10712 comm="syz.4.1635" path="socket:[24166]" dev="sockfs" ino=24166 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.691418][T10716] Set syz0 is full, maxelem 65536 reached [ 296.780854][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1638'. [ 296.782716][T10730] FAULT_INJECTION: forcing a failure. [ 296.782716][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 296.846959][T10738] loop0: detected capacity change from 0 to 256 [ 296.872397][T10730] CPU: 0 UID: 0 PID: 10730 Comm: syz.4.1641 Not tainted syzkaller #0 PREEMPT(lazy) [ 296.872496][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.872543][T10730] Call Trace: [ 296.872551][T10730] [ 296.872561][T10730] __dump_stack+0x1d/0x30 [ 296.872590][T10730] dump_stack_lvl+0x95/0xd0 [ 296.872643][T10730] dump_stack+0x15/0x1b [ 296.872670][T10730] should_fail_ex+0x262/0x280 [ 296.872712][T10730] ? xprt_switch_alloc+0x5e/0x2d0 [ 296.872799][T10730] should_failslab+0x8c/0xb0 [ 296.872836][T10730] __kmalloc_cache_noprof+0x7b/0x3d0 [ 296.872865][T10730] ? xprt_switch_alloc+0x5e/0x2d0 [ 296.872887][T10730] xprt_switch_alloc+0x5e/0x2d0 [ 296.872957][T10730] rpc_create_xprt+0x9f/0x620 [ 296.872978][T10730] ? kstrdup+0x88/0xd0 [ 296.873005][T10730] rpc_create+0x494/0x570 [ 296.873045][T10730] ? __radix_tree_replace+0x1b8/0x1f0 [ 296.873138][T10730] nfs_create_rpc_client+0x4d4/0x590 [ 296.873187][T10730] nfs4_alloc_client+0x4aa/0x6d0 [ 296.873223][T10730] ? pcpu_block_update+0x232/0x3b0 [ 296.873268][T10730] ? pcpu_block_refresh_hint+0x157/0x170 [ 296.873314][T10730] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 296.873397][T10730] nfs_get_client+0x829/0xb80 [ 296.873429][T10730] ? nfs_alloc_server+0x27a/0x360 [ 296.873461][T10730] ? timer_init_key+0x75/0x130 [ 296.873494][T10730] nfs4_set_client+0x28a/0x320 [ 296.873553][T10730] nfs4_create_server+0x373/0x960 [ 296.873601][T10730] nfs4_try_get_tree+0x29/0xc0 [ 296.873722][T10730] nfs_get_tree+0xb81/0xc60 [ 296.873763][T10730] vfs_get_tree+0x57/0x1d0 [ 296.873797][T10730] do_new_mount+0x288/0x8d0 [ 296.873894][T10730] path_mount+0x4ad/0xb90 [ 296.873926][T10730] __se_sys_mount+0x28c/0x2e0 [ 296.873966][T10730] ? fput+0x91/0xc0 [ 296.874047][T10730] __x64_sys_mount+0x67/0x80 [ 296.874082][T10730] x64_sys_call+0xc3b/0x2550 [ 296.874114][T10730] do_syscall_64+0x112/0x360 [ 296.874200][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.874230][T10730] RIP: 0033:0x7f0be294e0d9 [ 296.874246][T10730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.874299][T10730] RSP: 002b:00007f0be13a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.874325][T10730] RAX: ffffffffffffffda RBX: 00007f0be2bd5fa0 RCX: 00007f0be294e0d9 [ 296.874344][T10730] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 296.874379][T10730] RBP: 00007f0be13a7090 R08: 0000200000000500 R09: 0000000000000000 [ 296.874397][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.874410][T10730] R13: 00007f0be2bd6038 R14: 00007f0be2bd5fa0 R15: 00007ffe40071618 [ 296.874479][T10730] [ 297.426102][T10745] loop4: detected capacity change from 0 to 512 [ 297.478561][ T29] audit: type=1400 audit(1787199742.924:3724): avc: denied { mounton } for pid=10743 comm="syz.4.1644" path="/file0" dev="ramfs" ino=24245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 297.514055][T10745] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 297.514261][T10745] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1644: invalid block [ 297.524335][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 297.546954][T10745] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 297.547420][T10745] EXT4-fs (loop4): 1 truncate cleaned up [ 297.562778][T10745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.585645][T10745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.788055][T10754] SELinux: Context OPcǙ?s U^tQ`w& m [ 297.788055][T10754] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 297.818359][T10758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1643'. [ 297.842825][ T29] audit: type=1400 audit(1787199743.314:3725): avc: denied { relabelto } for pid=10749 comm="syz.5.1646" name="bus" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 297.888680][ T29] audit: type=1400 audit(1787199743.314:3726): avc: denied { associate } for pid=10749 comm="syz.5.1646" name="bus" dev="tmpfs" ino=1342 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 297.994013][ T29] audit: type=1400 audit(1787199743.474:3727): avc: denied { setattr } for pid=10759 comm="syz.4.1649" name="NETLINK" dev="sockfs" ino=24279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.025387][T10765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1649'. [ 298.131968][ T29] audit: type=1400 audit(1787199743.614:3728): avc: denied { unlink } for pid=4768 comm="syz-executor" name="bus" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 298.328182][ T29] audit: type=1400 audit(1787199743.814:3729): avc: denied { shutdown } for pid=10774 comm="syz.5.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.354932][ T29] audit: type=1400 audit(1787199743.814:3730): avc: denied { setattr } for pid=10774 comm="syz.5.1651" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 298.684963][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1656'. [ 298.702172][T10789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10789 comm=syz.3.1656 [ 298.831202][T10792] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(4) [ 298.910166][T10798] loop0: detected capacity change from 0 to 256 [ 299.837417][T10821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1663'. [ 299.857640][T10819] can: request_module (can-proto-0) failed. [ 299.875662][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 300.631740][ T29] audit: type=1400 audit(1787199746.114:3731): avc: denied { setopt } for pid=10835 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.698093][T10838] xt_hashlimit: size too large, truncated to 1048576 [ 300.829762][T10845] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1668'. [ 301.115257][T10830] Set syz0 is full, maxelem 65536 reached [ 301.206882][T10860] loop4: detected capacity change from 0 to 256 [ 301.828771][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 301.851038][ T29] audit: type=1400 audit(1787199747.334:3732): avc: denied { ioctl } for pid=10871 comm="syz.3.1679" path="socket:[24451]" dev="sockfs" ino=24451 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.992257][T10885] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 302.104843][T10892] 9pnet_fd: Insufficient options for proto=fd [ 302.112100][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 302.170281][T10894] netlink: 'syz.4.1687': attribute type 3 has an invalid length. [ 302.182411][ T29] audit: type=1400 audit(1787199747.634:3733): avc: denied { read } for pid=10891 comm="syz.3.1685" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.226885][ T29] audit: type=1400 audit(1787199747.634:3734): avc: denied { read open } for pid=10891 comm="syz.3.1685" path="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.303526][T10899] loop4: detected capacity change from 0 to 128 [ 302.385707][ T29] audit: type=1400 audit(1787199747.864:3735): avc: denied { bind } for pid=10903 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.442292][ T29] audit: type=1400 audit(1787199747.864:3736): avc: denied { listen } for pid=10903 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.462045][ T29] audit: type=1400 audit(1787199747.864:3737): avc: denied { accept } for pid=10903 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.535033][ T29] audit: type=1400 audit(1787199747.874:3738): avc: denied { read } for pid=10903 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.631311][T10923] loop0: detected capacity change from 0 to 256 [ 302.647238][ T29] audit: type=1400 audit(1787199748.134:3740): avc: denied { connect } for pid=10920 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.672592][ T29] audit: type=1400 audit(1787199748.124:3739): avc: denied { name_bind } for pid=10910 comm="syz.3.1695" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 302.713729][T10928] netlink: 'syz.4.1700': attribute type 3 has an invalid length. [ 302.844352][T10939] netlink: 'syz.5.1703': attribute type 10 has an invalid length. [ 302.852518][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.859735][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.913198][T10943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1702'. [ 303.423232][T10939] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.430446][T10939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.437825][T10939] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.444913][T10939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.456143][ T29] audit: type=1400 audit(1787199748.924:3741): avc: denied { kexec_image_load } for pid=10940 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 303.476360][T10941] loop4: detected capacity change from 0 to 128 [ 303.484831][T10939] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 303.513413][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1703'. [ 303.577519][T10941] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.633188][T10941] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.752354][T10952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1705'. [ 304.030703][T10959] loop0: detected capacity change from 0 to 512 [ 304.037942][T10959] EXT4-fs: Ignoring removed oldalloc option [ 304.156346][T10959] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1708: bad orphan inode 15 [ 304.206005][T10959] loop0: lost filesystem error report for type 5 error -117 [ 304.206241][T10959] ext4_test_bit(bit=14, block=5) = 0 [ 304.213609][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 304.213644][ C1] EXT4-fs (loop0): initial error at time 1787199749: ext4_orphan_get:1425 [ 304.213674][ C1] EXT4-fs (loop0): last error at time 1787199749: ext4_orphan_get:1425 [ 304.245626][T10959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.298389][ T9651] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.317056][T10956] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1708: bg 0: block 13: invalid block bitmap [ 304.347208][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.361041][T10973] netlink: 'syz.4.1712': attribute type 3 has an invalid length. [ 304.391116][T10971] can0: slcan on ttyS3. [ 304.432442][T10978] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1713'. [ 305.208322][T10970] can0 (unregistered): slcan off ttyS3. [ 305.301897][T11023] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1720'. [ 306.366949][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 306.407291][T11124] nfs4: Unknown parameter 'NLBL_MGMT' [ 306.418709][T11124] 9pnet_virtio: no channels available for device syz [ 306.450338][T11130] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1725'. [ 306.614914][T11137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1727'. [ 307.284605][T11147] loop0: detected capacity change from 0 to 512 [ 307.348468][T11147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.725874][T11157] netlink: 'syz.2.1736': attribute type 8 has an invalid length. [ 307.737220][T11157] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1736'. [ 307.813788][T11147] EXT4-fs (loop0): 1 truncate cleaned up [ 307.829745][T11147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.115126][T11147] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 308.148214][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 308.148232][ T29] audit: type=1400 audit(1787199753.584:3837): avc: denied { mounton } for pid=11146 comm="syz.0.1730" path="/124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.267228][ T8040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.477318][T11178] loop4: detected capacity change from 0 to 512 [ 308.483993][T11178] EXT4-fs: Ignoring removed oldalloc option [ 308.494282][T11178] EXT4-fs: journaled quota format not specified [ 308.923444][ T29] audit: type=1326 audit(1787199754.404:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 308.988611][ T29] audit: type=1326 audit(1787199754.404:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.046263][ T29] audit: type=1326 audit(1787199754.444:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.107305][ T29] audit: type=1326 audit(1787199754.444:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.147964][ T29] audit: type=1326 audit(1787199754.444:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.174925][ T29] audit: type=1326 audit(1787199754.444:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.210724][ T29] audit: type=1326 audit(1787199754.444:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.237117][ T29] audit: type=1326 audit(1787199754.444:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.284655][ T29] audit: type=1326 audit(1787199754.444:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3a5a60e0d9 code=0x7ffc0000 [ 309.388000][T11190] Set syz1 is full, maxelem 6117 reached [ 310.016777][T11214] netlink: 'syz.2.1751': attribute type 8 has an invalid length. [ 310.040569][T11203] Set syz0 is full, maxelem 65536 reached [ 310.046393][T11214] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1751'. [ 310.079802][T11216] loop4: detected capacity change from 0 to 512 [ 310.101124][T11216] EXT4-fs: Ignoring removed oldalloc option [ 310.129446][T11216] EXT4-fs: journaled quota format not specified [ 310.227861][T11224] loop0: detected capacity change from 0 to 256 [ 310.616274][T11250] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1765'. [ 310.663021][T11224] ================================================================== [ 310.671149][T11224] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 310.679253][T11224] [ 310.681600][T11224] write to 0xffff88811c3066a0 of 8 bytes by task 11248 on cpu 1: [ 310.689334][T11224] filemap_splice_read+0x52a/0x790 [ 310.694482][T11224] splice_direct_to_actor+0x261/0x680 [ 310.699901][T11224] do_splice_direct+0x119/0x1a0 [ 310.704812][T11224] do_sendfile+0x37d/0x640 [ 310.709277][T11224] __x64_sys_sendfile64+0x105/0x150 [ 310.714521][T11224] x64_sys_call+0x1015/0x2550 [ 310.719230][T11224] do_syscall_64+0x112/0x360 [ 310.723861][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.729773][T11224] [ 310.732127][T11224] write to 0xffff88811c3066a0 of 8 bytes by task 11224 on cpu 0: [ 310.739871][T11224] filemap_splice_read+0x52a/0x790 [ 310.745018][T11224] splice_direct_to_actor+0x261/0x680 [ 310.750437][T11224] do_splice_direct+0x119/0x1a0 [ 310.755337][T11224] do_sendfile+0x37d/0x640 [ 310.759809][T11224] __x64_sys_sendfile64+0x105/0x150 [ 310.765050][T11224] x64_sys_call+0x1015/0x2550 [ 310.769763][T11224] do_syscall_64+0x112/0x360 [ 310.774397][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.780329][T11224] [ 310.782669][T11224] value changed: 0x000000000000011a -> 0x000000000000011b [ 310.789891][T11224] [ 310.792239][T11224] Reported by Kernel Concurrency Sanitizer on: [ 310.798415][T11224] CPU: 0 UID: 0 PID: 11224 Comm: syz.0.1755 Not tainted syzkaller #0 PREEMPT(lazy) [ 310.807821][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.817907][T11224] ================================================================== [ 310.841236][T11253] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1766'.